@pellux/goodvibes-tui 1.13.0 → 1.14.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "1.13.0",
+  "version": "1.14.0",
   "description": "Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.",
   "type": "module",
   "main": "src/main.ts",
@@ -51,6 +51,9 @@
     "release:dry": "bun run scripts/release.ts --dry-run",
     "publish:package": "bun run scripts/publish-package.ts",
     "publish:dry-run": "bun run scripts/publish-package.ts --dry-run",
+    "platform:assemble": "bun run scripts/assemble-platform-packages.ts",
+    "platform:publish": "bun run scripts/publish-platform-packages.ts",
+    "platform:publish:dry-run": "bun run scripts/publish-platform-packages.ts --dry-run",
     "publish:dry-run:github": "GOODVIBES_PUBLIC_PACKAGE_NAME=@mgd34msu/goodvibes-tui GOODVIBES_PUBLISH_REGISTRY=https://npm.pkg.github.com bun run scripts/publish-package.ts --dry-run",
     "publish:check": "bun run scripts/publish-check.ts",
     "package:install-check": "bun run scripts/package-install-check.ts",
@@ -59,8 +62,10 @@
     "perf:check": "bun run scripts/perf-check.ts",
     "perf:baseline": "GOODVIBES_PERF_SAVE_BASELINE=1 bun run scripts/perf-check.ts",
     "architecture:check": "bun run scripts/check-architecture.ts",
+    "workflows:check": "bun run scripts/check-workflows.ts",
     "audit:home": "bun run scripts/audit-goodvibes-home.ts",
     "foundation:artifacts": "bun run scripts/export-foundation-artifacts.ts",
+    "docs:commands": "bun run scripts/generate-command-reference.ts",
     "verification:ledger": "bun run scripts/verification-ledger.ts",
     "verification:live": "bun run scripts/verify-live.ts",
     "eval:gate": "bun run scripts/eval-gate.ts",
@@ -99,7 +104,8 @@
     "@anthropic-ai/vertex-sdk": "^0.16.0",
     "@ast-grep/napi": "^0.42.0",
     "@aws/bedrock-token-generator": "^1.1.0",
-    "@pellux/goodvibes-sdk": "1.6.1",
+    "@pellux/goodvibes-sdk": "1.7.1",
+    "@pellux/goodvibes-terminal-shell": "1.7.1",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "graphql": "^16.13.2",
@@ -124,15 +130,13 @@
     "@types/bun": "^1.3.10",
     "typescript": "^5.9.3"
   },
-  "trustedDependencies": [
-    "@pellux/goodvibes-sdk",
-    "core-js",
-    "tree-sitter-css",
-    "tree-sitter-javascript",
-    "tree-sitter-json",
-    "tree-sitter-python",
-    "tree-sitter-typescript"
-  ],
+  "optionalDependencies": {
+    "@pellux/goodvibes-tui-linux-x64": "1.14.0",
+    "@pellux/goodvibes-tui-linux-arm64": "1.14.0",
+    "@pellux/goodvibes-tui-darwin-x64": "1.14.0",
+    "@pellux/goodvibes-tui-darwin-arm64": "1.14.0"
+  },
+  "trustedDependencies": [],
   "overrides": {
     "minimatch": "^10.2.5"
   }

package/scripts/postinstall.js

@@ -1,9 +1,19 @@
 #!/usr/bin/env bun
 import { chmodSync, copyFileSync, cpSync, existsSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
-import { createHash } from 'node:crypto';
+import { createRequire } from 'node:module';
 import { homedir } from 'node:os';
 import { basename, dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { CHECKSUM_MANIFEST_NAME, parseChecksumFile, resolveArtifactNames, sha256, verifyChecksum } from '../src/runtime/release-artifacts.ts';
+
+// Platform package names, mirrored from scripts/platform-packages.ts, keyed by
+// `${process.platform}-${node-arch}`.
+const PLATFORM_PACKAGE_NAMES = {
+  'linux-x64': '@pellux/goodvibes-tui-linux-x64',
+  'linux-arm64': '@pellux/goodvibes-tui-linux-arm64',
+  'darwin-x64': '@pellux/goodvibes-tui-darwin-x64',
+  'darwin-arm64': '@pellux/goodvibes-tui-darwin-arm64',
+};
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const projectRoot = join(__dirname, '..');
@@ -15,56 +25,12 @@ function isSourceCheckout() {
   return existsSync(join(projectRoot, '.git')) || existsSync(join(projectRoot, 'bun.lock'));
 }
 
-function resolveArtifactNames(platform, arch) {
-  if (platform === 'linux' && arch === 'x64') {
-    return {
-      app: 'goodvibes-linux-x64',
-      daemon: 'goodvibes-daemon-linux-x64',
-    };
-  }
-  if (platform === 'linux' && arch === 'arm64') {
-    return {
-      app: 'goodvibes-linux-arm64',
-      daemon: 'goodvibes-daemon-linux-arm64',
-    };
-  }
-  if (platform === 'darwin' && arch === 'x64') {
-    return {
-      app: 'goodvibes-macos-x64',
-      daemon: 'goodvibes-daemon-macos-x64',
-    };
-  }
-  if (platform === 'darwin' && arch === 'arm64') {
-    return {
-      app: 'goodvibes-macos-arm64',
-      daemon: 'goodvibes-daemon-macos-arm64',
-    };
-  }
-  return null;
-}
-
 function prepareBinary(path) {
   if (process.platform !== 'win32') {
     chmodSync(path, 0o755);
   }
 }
 
-function sha256(buffer) {
-  return createHash('sha256').update(buffer).digest('hex');
-}
-
-function parseChecksumFile(contents) {
-  const checksums = new Map();
-  for (const rawLine of contents.split(/\r?\n/)) {
-    const line = rawLine.trim();
-    if (!line) continue;
-    const match = line.match(/^([a-f0-9]{64})\s+\*?(.+)$/i);
-    if (!match) continue;
-    checksums.set(match[2], match[1].toLowerCase());
-  }
-  return checksums;
-}
-
 function resolveRepositoryBaseUrl() {
   const repositoryUrl = typeof pkg.repository?.url === 'string' ? pkg.repository.url : '';
   const normalized = repositoryUrl
@@ -93,6 +59,48 @@ async function downloadText(url) {
   return await response.text();
 }
 
+/**
+ * Copy the prebuilt binaries (and sqlite-vec addon, if present) out of the
+ * installed platform package into vendor/. Returns true when it handled the
+ * install, false when no platform package is available (fall back to download).
+ */
+function installFromPlatformPackage(artifacts, vendorDir) {
+  const pkgName = PLATFORM_PACKAGE_NAMES[`${process.platform}-${process.arch}`];
+  if (!pkgName) return false;
+
+  let pkgBinDir;
+  try {
+    const require = createRequire(join(projectRoot, 'package.json'));
+    const pkgJsonPath = require.resolve(`${pkgName}/package.json`);
+    pkgBinDir = join(dirname(pkgJsonPath), 'bin');
+  } catch {
+    return false;
+  }
+
+  const app = join(pkgBinDir, artifacts.app);
+  const daemon = join(pkgBinDir, artifacts.daemon);
+  if (!existsSync(app) || !existsSync(daemon)) {
+    return false;
+  }
+
+  for (const artifactName of [artifacts.app, artifacts.daemon]) {
+    const destination = join(vendorDir, artifactName);
+    rmSync(destination, { force: true });
+    copyFileSync(join(pkgBinDir, artifactName), destination);
+    prepareBinary(destination);
+  }
+
+  // Carry the sqlite-vec native addon (bin/lib/...) beside the vendored binary
+  // so semantic memory keeps working (resolved as <execDir>/lib/...).
+  const libSrc = join(pkgBinDir, 'lib');
+  if (existsSync(libSrc)) {
+    cpSync(libSrc, join(vendorDir, 'lib'), { recursive: true });
+  }
+
+  console.log(`postinstall: installed binaries from ${pkgName} (registry integrity, no download)`);
+  return true;
+}
+
 async function installPlatformBinaries() {
   const artifacts = resolveArtifactNames(process.platform, process.arch);
   if (!artifacts) {
@@ -128,6 +136,14 @@ async function installPlatformBinaries() {
     return;
   }
 
+  // Prefer the platform package (@pellux/goodvibes-tui-<os>-<arch>): the package
+  // manager installed it with registry integrity and no lifecycle script, so its
+  // binaries need no checksum download here. Copy them into vendor/ so the bin/
+  // launchers find them on the fast path.
+  if (installFromPlatformPackage(artifacts, vendorDir)) {
+    return;
+  }
+
   const releaseBaseUrl =
     process.env.GOODVIBES_RELEASE_BASE_URL?.trim() ||
     `${resolveRepositoryBaseUrl()}/releases/download/v${pkg.version}`;
@@ -144,9 +160,11 @@ async function installPlatformBinaries() {
     await downloadFile(`${releaseBaseUrl}/${artifactName}`, tempDestination);
     const actual = sha256(readFileSync(tempDestination));
     const expected = checksums.get(artifactName);
-    if (expected && expected !== actual) {
+    try {
+      verifyChecksum(artifactName, actual, expected);
+    } catch (error) {
       rmSync(tempDestination, { force: true });
-      throw new Error(`checksum mismatch for ${artifactName}: expected ${expected}, got ${actual}`);
+      throw error;
     }
     rmSync(destination, { force: true });
     copyFileSync(tempDestination, destination);
@@ -217,4 +235,11 @@ async function main() {
   deployBundledFiles();
 }
 
-await main();
+// Guarded so this module can be imported by tests (to exercise
+// verifyChecksum, parseChecksumFile, etc.) without triggering a real
+// network install as a side effect of the import.
+if (import.meta.main) {
+  await main();
+}
+
+export { verifyChecksum, parseChecksumFile, sha256, resolveArtifactNames, CHECKSUM_MANIFEST_NAME };

package/src/cli/bundle-command.ts

@@ -125,14 +125,14 @@ export async function handleBundleCommand(runtime: CliCommandRuntime): Promise<C
 
   if (sub === 'inspect') {
     const path = rest[0];
-    if (!path) return { output: 'Usage: goodvibes bundle inspect <path>', exitCode: 2 };
+    if (!path) return { output: 'Usage: goodvibes support-bundle inspect <path>', exitCode: 2 };
     const sourcePath = shellPaths.resolveWorkspacePath(path);
     const parsed = readJsonFile(sourcePath);
     if (!parsed.ok) return { output: `Invalid bundle JSON: ${parsed.error}`, exitCode: 1 };
     const summary = inspectBundle(sourcePath, parsed.value);
     return {
       output: formatJsonOrText(runtime, summary, [
-        'GoodVibes bundle',
+        'GoodVibes support bundle',
         `  type: ${summary.type}`,
         `  version: ${summary.version}`,
         `  path: ${summary.path}`,
@@ -192,14 +192,14 @@ export async function handleBundleCommand(runtime: CliCommandRuntime): Promise<C
         path: targetPath,
         redactedConfigPaths: redactedConfig.redactedPaths,
         serviceIssues: service.issues,
-      }, `Bundle exported: ${targetPath}\n  redactedConfigKeys: ${redactedConfig.redactedPaths.length}\n  serviceIssues: ${service.issues.length}`),
+      }, `Support bundle exported: ${targetPath}\n  redactedConfigKeys: ${redactedConfig.redactedPaths.length}\n  serviceIssues: ${service.issues.length}`),
       exitCode: 0,
     };
   }
 
   if (sub === 'import') {
     const path = rest[0];
-    if (!path) return { output: 'Usage: goodvibes bundle import <path>', exitCode: 2 };
+    if (!path) return { output: 'Usage: goodvibes support-bundle import <path>', exitCode: 2 };
     const sourcePath = shellPaths.resolveWorkspacePath(path);
     const parsed = readJsonFile(sourcePath);
     if (!parsed.ok) return { output: `Invalid bundle JSON: ${parsed.error}`, exitCode: 1 };
@@ -223,5 +223,5 @@ export async function handleBundleCommand(runtime: CliCommandRuntime): Promise<C
     };
   }
 
-  return { output: 'Usage: goodvibes bundle export [path]|inspect <path>|import <path>', exitCode: 2 };
+  return { output: 'Usage: goodvibes support-bundle export [path]|inspect <path>|import <path>', exitCode: 2 };
 }

package/src/cli/completion.ts

@@ -21,7 +21,7 @@ const COMMANDS = [
   'surfaces',
   'listener',
   'control-plane',
-  'bundle',
+  'support-bundle',
   'remote',
   'bridge',
   'completion',

package/src/cli/completions/generate.ts

@@ -263,9 +263,9 @@ export const COMPLETION_COMMANDS: readonly CompletionCommand[] = [
     subcommands: ['status'],
   },
   {
-    name: 'bundle',
-    aliases: ['bundle', 'bundles'],
-    description: 'Move setup/profile/trust/support bundles',
+    name: 'support-bundle',
+    aliases: ['support-bundle', 'bundle', 'bundles'],
+    description: 'Move a support snapshot (config + diagnostics + posture)',
     subcommands: ['export', 'inspect', 'import'],
   },
   {
@@ -280,6 +280,18 @@ export const COMPLETION_COMMANDS: readonly CompletionCommand[] = [
     description: 'Bridge CLI operations (alias: remote)',
     subcommands: [],
   },
+  {
+    name: 'hooks',
+    aliases: ['hooks', 'hook'],
+    description: 'Validate hooks.json against the hook loader schema',
+    subcommands: ['validate'],
+  },
+  {
+    name: 'plugin',
+    aliases: ['plugin', 'plugins'],
+    description: 'Scaffold or validate a plugin directory',
+    subcommands: ['init', 'validate'],
+  },
   {
     name: 'completion',
     aliases: ['completion', 'completions'],